ANSWER ALL IN DETAIL!!!

Scenario:

GPET is an organization founded in 2001 that designs, develops, implements, and maintains IT systems, products, and services for one of the country's leading government institutions. The organization, which is governed by a Board of Directors, has a CEO as the highest authority. The company operates with 500 employees. The mission of the company is to provide IT solutions, manage the general information system and provide IT consulting services to its parent organization. The organization has regional offices in five other cities.

Questions:

Based on the mission that this company has, determine what are the possible security situations that it may face. Base your analysis on the implication that each of the following aspects may have, providing specific examples that are applicable to each of the following concepts:

1. Threat

2. Vulnerability

3. Exploit

4. Risk

5. Risk Impact and Likelihood

6. Controls

a. Preventive

b. Corrective

c. Detective

d. Deterrent

e. Mitigating

f. Compensating

7. SIEM (Security Information and Event Management)

8. SOC (Security Operations Center)

Questions:

1. How are threats, vulnerabilities, exploits and different controls related?

2. Why is it extremely important to choose a suitable SIEM and have a robust SOC for a good security program?

3. Identify at least three (3) defense strategies that the company can present to manage its security problems. Support your answer with theory. Present innovative solutions and explain how they work.